Security hardening: Don't expose unnecessary ports to the public #106

Merged

valberg merged 1 commit from :main into main

2022-11-10 19:19:00 +00:00

samsapti commented

2022-11-10 18:36:34 +00:00

Owner

Fixed the following:

Containers that have VIRTUAL_PORT=x don't need to publish port x, since they're on the same Docker-network external_services as nginx
Corrected some VIRTUAL_PORT values
Membersystem now uses {{ membersystem.domain }} for some env vars instead of hard coded domain name
Membersystem's Postgres doesn't need to expose its port since both it and the Membersystem container are on network membersystem

Fixed the following: - Containers that have `VIRTUAL_PORT=x` don't need to publish port `x`, since they're on the same Docker-network `external_services` as nginx - Corrected some `VIRTUAL_PORT` values - Membersystem now uses `{{ membersystem.domain }}` for some env vars instead of hard coded domain name - Membersystem's Postgres doesn't need to expose its port since both it and the Membersystem container are on network `membersystem`

❤️ 1

samsapti added 1 commit 2022-11-10 18:36:34 +00:00